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(57) Abstract: An access management apparatus and method for managing or controlling access to an extranet for xSP. To overcome 
O "the problems of centralized authority and authorization cache", the present invention decentralizes the role of access management 
by using ACL cached, and synchronizes the decentralized access management roles by using an A A server. In addition, it overcomes 
Q "inefficiency of session management" by adopting authentication/authorization based on a web browser cookie, and it additionally 
includes the functions of supporting the internet security standard, and processing a variety of security/encryption techniques and a 
user-defined access management. 



WO 2005/048526 Al I Hill llllllll II llllll IIHI Hill IIIII llll I II 111 IHII Hill lllll 11)11 Dill llll Dllin 1111 111 (III 



(48) Date of publication of this corrected version: For two-letter codes and other abbreviations, refer to the "Guid- 

24 August 2006 ance Notes on Codes and A bbreviations " appearing at the begin - 

(15) Information about Correction: nin S of each regular issue of the PCT Gazette. 
see PCT Gazette No. 34/2006 of 24 August 2006 



